fix(authentication): disable inbound claims mapping to make JWT Beare…

…r scheme parse user ID correctly
crowdparlay · Oct 11, 2024 · 39f95eb · 39f95eb
1 parent d16e18a
commit 39f95eb
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 2 deletions.
diff --git a/src/CrowdParlay.Social.Api/AuthenticationConstants.cs b/src/CrowdParlay.Social.Api/AuthenticationConstants.cs
@@ -3,5 +3,5 @@ namespace CrowdParlay.Social.Api;
 public static class AuthenticationConstants
 {
     public const string CookieAuthenticationUserIdClaim = "user_id";
-    public const string BearerAuthenticationUserIdClaim = "sub";
+    public const string JwtBearerAuthenticationUserIdClaim = "sub";
 }
diff --git a/src/CrowdParlay.Social.Api/Extensions/ClaimsPrincipalExtensions.cs b/src/CrowdParlay.Social.Api/Extensions/ClaimsPrincipalExtensions.cs
@@ -8,7 +8,7 @@ public static class ClaimsPrincipalExtensions
     {
         var userIdClaim = principal.Claims.FirstOrDefault(claim => claim.Type
             is AuthenticationConstants.CookieAuthenticationUserIdClaim
-            or AuthenticationConstants.BearerAuthenticationUserIdClaim);
+            or AuthenticationConstants.JwtBearerAuthenticationUserIdClaim);
 
         return Guid.TryParse(userIdClaim?.Value, out var value) ? value : null;
     }

diff --git a/src/CrowdParlay.Social.Api/Extensions/ConfigureAuthenticationExtensions.cs b/src/CrowdParlay.Social.Api/Extensions/ConfigureAuthenticationExtensions.cs
@@ -19,6 +19,7 @@ public static IServiceCollection ConfigureAuthentication(this IServiceCollection
 
         builder.AddJwtBearer(JwtBearerDefaults.AuthenticationScheme, options =>
         {
+            options.MapInboundClaims = false;
             options.RequireHttpsMetadata = false;
             options.TokenValidationParameters.ValidateAudience = false;
             options.TokenValidationParameters.ValidateIssuer = false;